HIGHCVSS v4 8.6Vulnerability
CVE-2026-110972
Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 242 in version 10.02.002.
Properties
- Cvss score
- 8.6
- First seen
- 2026-10-30T12:31:16+00:00
- Last seen
- 2026-10-30T12:31:16+00:00
- Euvd assigner
- CERT-PL
- Retrieved at
- 2026-10-30T16:05:55+00:00
- Src batch id
- euvd-20261030T133401Z-65f668
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113776
- Score
- 8.6
- Euvd base score version
- 4.0
- Fetched at
- 2026-10-30T13:34:21+00:00
- Euvd vendor
- Zakład Ubezpieczeń Społecznych
- Cvss vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-10-30T13:34:21+00:00
- Euvd base score
- 8.6
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Content hash
- 5f2cea72e922575d9bf7623398b3c03b466f25b86a4f478cc8f57a10c596b0e9
- Published at
- 2026-10-30T12:16:34.803
- Last modified
- 2026-10-30T12:16:34.803
- Euvd updated
- 2026-10-30T12:31:16+00:00
- Euvd epss pct
- 0
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph